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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (currently amended) A system for enabling remote access to an application 
server, upon authentication of a location from which a user has sought access as an authorized 
location, for enabling processing of a transaction requiring user location authentication, wherein 
the user location includes means for enabling the user to request remote access to the application 
server, the system comprising: 

an access server, for receiving and processing a request for access to the application 
server from a user request enabling means, the server adapted to be located remote from the 
user's location; 

an authenticator for authenticating the location of the user responsive to receipt of a 
processed request from the access server, the authenticator including a challenge and response 
sytem for authenticating the location of the user, and the authenticator adapted to be connected to 
the access server; 

means for interconnecting the access server and the authenticator; and 
a first number authenticating system, wherein the first number authenticating system 
provides anti-circumvention protection that determines a physical location of an originating 
number to prevent the user from connecting to the access server from a physical location other 
than the user locationT , and wherein the first number authenticating system is a non-global 
positioning satellite system. 

2. (original) The system of claim I, wherein the authenticator comprises an 
authenticating server. 

3. (canceled) 
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4. (original) The system of claim 1 , further comprising means for insuring the 
user's presence at the location. 

5. (original) The system of claim 1 , further comprising means for enabling the 
user to request remote access to the application server. 

6. (original) The system of claim 1 , wherein the interconnecting means 
comprise a network. 

7. (original) The system of claim 2, wherein the authenticating server includes a 
database of authorized locations, for enabling verification of the location of the user as an 
authorized user location. 

8. (original) The system of claim 2, wherein the authenticating server comprises 
a Remote Access Dial-In User Service (RADIUS) server. 

9. (canceled) 

1 0. (original) The system of claim 4, wherein the user presence insuring means 
comprise a card for identifying the user, and a reader for reading the user identifying card, 
adapted to be connected to the user access request enabling means at the user location. 

1 1 . (original) The system of claim 5, wherein the user request enabling means 
comprise an interface station. 

12. (original) The system of claim 5, wherein the user request enabling means 
comprise a client. 

13. (original) The system of claim 5, wherein the user request enabling means 
include a location identifier. 

14. (original) The system of claim 5, wherein the authenticating means are 
adapted to issue a security challenge to the user request enabling means, and the user request 
enabling means are further adapted to interrogate the security challenge, to generate a response, 
and to transmit the response to the authenticator. 
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15. (original) The system of claim 5, wherein the user request enabling means 
include an identifier associated with the user's location, and the authenticator comprises means 
for authenticating the identifier associated with the user's location. 

1 6. (original) The system of claim 5, wherein the user request enabling means 
include a dialer, located at the user's location, and wherein the dialer includes a number 
associated therewith. 

1 7. (original) The system of claim 5, wherein the user request enabling means 
comprise a plurality of user request enabling means, and the interconnecting means comprise a 
network comprising an intranet which includes at least one local area network, adapted to 
interconnect at least one of the plurality of user request enabling means and the access server. 

18. (original) The system of claim 5, wherein the interconnecting means are 
further adapted to interconnect the user request enabling means. 

1 9. (original) The system of claim 6, wherein the network comprises an intranet. 

20. (original) The system of claim 6, wherein the network comprises the Internet. 

2 1 . (original) The system of claim 8, further comprising means for enabling the 
user to request remote access to the application server, wherein the authenticating server is 
further adapted to issue a security challenge to the user request enabling means. 

22. (original) The system of claim 1 5, wherein the locating identifier comprises a 

cookie. 

23. (original) The system of claim 16, wherein the authenticator comprises a 
number identifier for identifying the number associated with the dialer located at the user's 
location. 

24. (original) The system of claim 16, wherein a dialing system includes a 
plurality of numbers each associated with one of a plurality of dialers adapted to enable dialing 
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therefrom and each dialer associated with a different user location, and the authenticator further 
comprises means for identifying the first number dialed from in the dialing system. 

25. (original) The system of claim 20, wherein the locating identifier comprises a 
dynamic cookie. 

26. (original) The system of claim 2 1 , wherein the user request enabling means 
are adapted to issue a response to the security challenge, and the authenticating means include a 
database for enabling verification of the response of the user request enabling means to the 
security challenge. 

27. (original) The system of claim 23, wherein the number identifier comprises 
Automatic Number Identification. 

28. (original) The system of claim 24, wherein the first number identifying 
means comprises Dialed Number Identification Services. 

29. (original) The system of claim 26, wherein the authenticator is further 
adapted to verify the response of the user request enabling means to the security challenge based 
on the database in the authenticator, and to authorize access to the application server. 

30. (currently amended) A system for enabling remote access to an application 
server, upon authentication of a location from which a user has sought access as an authorized 
location, for enabling processing of a transaction requiring user location authentication, wherein 
the user location includes means for enabling the user to request remote access to the application 
server, the system comprising: 

an access server, for receiving and processing a request for access to the application 
server from a user request enabling means, the server adapted to be located remote from the 
user's location; 

an authenticator for authenticating the location of the user responsive to receipt of the 
processed request from the access server, the authenticator adapted to be connected to the access 
server, the authenticator including a Remote Access Dial-In Service (RADIUS) serve r and a 
challenge and response system for authenticating the location of the user ; 
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means for interconnecting the access server and the authenticator; 

means for enabling the user to request remote access to the application server, such 
means including a dialer, located at the user's location, wherein the dialer includes a dialing 
number associated therewith; and 

a first number authenticating system, wherein the first number authenticating system 
provides anti-circumvention protection that determines a physical location of an originating 
number to prevent the user from connecting to the access server from a physical location other 
than the user location ^ and wherein the first number authenticating system is a non-global 
positioning satellite system. 

3 1 . (original) The system of claim 30, wherein the authenticator includes a 
number identifier for identifying the number associated with the dialer located at the user's 
location. 

32. (original) The system of claim 30, and further comprising a dialing system 
including a plurality of numbers each associated with one of a plurality of dialers adapted to 
enable dialing therefrom and each associated with a different user location, and the authenticator 
comprises means for identifying the first number dialed from the dialing system. 

33. (original) The system of claim 3 1 , wherein the number identifier comprises 
Automatic Number Identification. 

34. (original) The system of claim 32 wherein the first number identifying means 
comprises Dialed Number Identification Services. 

35. (currently amended) A system for enabling remote access to an application 
server, upon authentication of a location from which a user has sought access as an authorized 
location, for enabling processing of a transaction requiring user location authentication, wherein 
the user location includes means for enabling the user to request remote access to the application 
server, comprising: 

an access server, for receiving a request for access to the application server from user 
request enabling means, adapted to be located remote from the user's location; 
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an authenticator for authenticating the location of the use r with a challenge response 
system , the authenticator adapted to be connected to the access server and further including an 
identifier for determining the identity of the user; 

means for interconnecting the access server and the authenticator; 

means for enabling the user to request remote access to the application server; and 

a first number authenticating system, wherein the first number authenticating system 
provides anti-circumvention protection that determines a physical location of an originating 
number to prevent the user from connecting to the access server from a physical location other 
than the user location ^ and wherein the first number authenticating system is a non-global 
positioning satellite system. 

36. (original) The system of claim 35, wherein the user identifier further 
comprises a challenge and response system. 

37. (original) The system of claim 35, wherein the authenticator is adapted to 
issue a security challenge to the user request enabling means, and the user request enabling 
means are further adapted to interrogate the security challenge, to generate a response, and to 
transmit the response to the authenticator. 

38. (original) The system of claim 35, further comprising means for enabling the 
user to request remote access to the application server, wherein the authenticator server is further 
adapted to issue a security challenge to the user request enabling means. 

39. (original) The system of claim 38, wherein the user request enabling means 
are adapted to issue a response to the security challenge, and the authenticator includes a 
database for enabling verification of the response of the user request enabling means to the 
security challenge. 

40. (original) The system of claim 39, wherein the authenticating means are 
further adapted to verify the response of the user request enabling means to the security 
challenge based on the database in the authenticator, and to authorize access to the application 
server. 
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41 . (currently amended) A system for enabling remote access to an application 
server upon authentication of a location from which a user has sought access as an authorized 
location for enabling access to the application server and processing of a transaction requiring 
user location authentication, wherein the user location includes means for enabling the user to 
request remote access to the application server, comprising: 

an access server, for receiving a request for access to the application server from user 
request enabling means adapted to be located remote from the user's location; 

an authenticator for authenticating the location of the use r with a challenge and response 
system , adapted to be connected to the access server; 

ameans for interconnecting the access server and the authenticator; 

ameans for insuring the user's presence at the location that comprises a card for 
identifying the user and a reader for reading the user identifying card, the reader adapted to be 
connected to the user access request enabling means at the user location ; and 

a first number authenticating system, wherein the first number authenticating system 
provides anti-circumvention protection that determines a physical location of an originating 
number to prevent the user from connecting to the access server from a physical location other 
than the user location ^ and wherein the first number authenticating system is a non-global 
positioning satellite system. 

42. (canceled) 

43. (currently amended) A system for enabling remote access to an application 
server, upon authentication of a location from which a user has sought access thereto as an 
authorized location, for enabling processing of a transaction requiring user location 
authentication, wherein the user location includes means for enabling the user to request remote 
access to the application server, comprising: 

an access server, for receiving and processing a request for access to the application 
server from user request enabling means, the server adapted to be located remote from the user's 
location; 
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an authenticating server for authenticating the location of the user responsive to receipt of 
the processed request from the access server via a challenge and response system, the 
authenticating server adapted to be connected to the access server; 

a network for interconnecting the access server and the authenticating server; and 
a first number authenticating system, wherein the first number authenticating system 
provides anti-circumvention protection that determines a physical location of an originating 
number to prevent the user from connecting to the access server from a physical location other 
than the user location ^ and wherein the first number authenticating system is a non-global 
positioning satellite system. 

44. (original) The system of claim 43, further comprising a client for enabling 
the user to request remote access to the application server. 

45. (original) The system of claim 43, wherein the authenticating server includes 
a database of authorized locations, for enabling verification of the location of the user as an 
authorized user location. 

46. (original) The system of claim 44, wherein the client includes an identifier 
associated with the user's location, and the authenticating server is adapted to authenticate the 
identifier associated with the user's location. 

47. (original) The system of claim 44, wherein the client comprises a plurality of 
clients and the network comprises an intranet which includes a plurality of local area networks, 
each adapted to interconnect at least one of the plurality of clients and the access server. 

48. (currently amended) A method of enabling remote access to an application 
server, upon authentication of a location from which a user has sought access thereto as an 
authorized location, for enabling processing of a transaction requiring user location 
authentication, wherein the user location includes means for enabling the user to request remote 
access to the application server, in a system which comprises an access server, for receiving and 
processing a request for access to the application server from user request enabling means, 
adapted to be located remote from the user's location, an authenticator for authenticating the 
identity and the location of the user responsive to receipt of the processed request from the 
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access server, adapted to be connected to the access server, and means for interconnecting the 
access server and the authenticator, wherein the method comprises: 

requesting an access server to enable a user at a user's location to access an application 

server; 

authenticating the location of the user m-via the authenticator; and 

authenticating the identity of the user via the authenticator; 

identifying a first number from which the user has dialed, wherein a first number 
authenticating system provides anti-circumvention protection that determines a physical location 
of an originating number to prevent a user from connecting to the access server from a physical 
location other than the user location , and wherein the first number authenticating system is a 



determining in the authenticator whether to enable the user to access the application 
server based on the authenticating of the user's location. 

49. (original) The method of claim 48, wherein the authenticator comprises an 
authenticating server, and wherein authenticating further comprises authenticating through the 
authenticating server. 

50. (canceled) 

5 1 . (original) The method of claim 48, further comprising insuring the user' s 
presence at the location through a user presence insuring means. 

52. (original) The method of claim 48, further comprising enabling the user to 
request remote access to the application server through the user request enabling means. 

53. (original) The method of claim 48, further comprising interconnecting the 
access server and the authenticating means through a network. 

54. (original) The method of claim 49, wherein authenticating comprises 
authenticating through an authorized location database. 




t; and 
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55. (original) The method of claim 49, wherein authenticating further comprises 
authenticating through a RADIUS server. 

56. (currently amended) The method of claim-SQ48, wherein d e termining 
authenticating the identity of the user further comprises challenging the identity of the user and 
processing the response thereto. 

57. (original) The method of claim 5 1 , wherein insuring further comprises 
reading a user identifying card which identifies the user, via a card reader, connected to the user 
access request enabling means at the user location. 

58. (original) The method of claim 52, wherein enabling further comprises 
enabling the user request through an interface station. 

59. (original) The method of claim 52, wherein enabling further comprises 
enabling the user request through a client. 

60. (original) The method of claim 52, wherein enabling further comprises 
enabling the user request through the location identifier. 

6 1 . (original) The method of claim 52, further comprising issuing a security 
challenge from the authenticator interrogating a security challenge, generating a response to the 
challenge, and transmitting the response from the user request enabling means. 

62. (original) The method of claim 52, wherein authenticating comprises 
authenticating the user's location through a user associated identifier. 

63. (original) The method of claim 52, wherein enabling comprises enabling 
through a dialer having an associated number. 

64. (original) The method of claim 52, wherein interconnecting comprises 
interconnecting a plurality of user request enabling means through a plurality of local area 
networks. 
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65. (original) The method of claim 52, wherein interconnecting further 
comprises interconnecting with a user request enabling means. 

66. (original) The method of claim 53, wherein the network comprises an 
intranet, and wherein interconnecting further comprises interconnecting through the intranet. 

67. (original) The method of claim 53, wherein the network comprises the 
Internet, and wherein interconnecting further comprises interconnecting through the Internet. 

68. (original) The method of claim 55, wherein authenticating further comprises 
issuing a security challenge to the user request enabling means through an authenticating server. 

69. (original) The method of claim 62, wherein authenticating further comprises 
authenticating through a locating identifier cookie. 

70. (original) The method of claim 63, wherein the authenticator comprises 
means for identifying the number associated with the dialer located at the user's location, and 
wherein the step of authenticating further comprises identifying the number associated with the 
dialer. 

7 1 . (original) The method of claim 63 wherein a dialing system includes a 
plurality of numbers each associated with one of a plurality of dialers adapted to enable dialing 
therefrom and each associated with a different user location, and the authenticator comprises 
means for identifying the first number dialed in the dialing system, and wherein the step of 
authenticating further comprises identifying the first number dialed. 

72. (original) The method of claim 67, wherein the locating identifier comprises 
a dynamic cookie. 

73. (original) The method of claim 68, wherein the user request enabling means 
are adapted to issue a response to the security challenge, and the authenticator include a database 
for enabling verification of the response of the user request enabling means to the security 
challenge, and wherein the step of authenticating further comprises verifying the response to the 
security challenge through the verification database. 
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74. (original) The method of claim 70, wherein identifying further comprises 
identifying through Automatic Number Identification. 

75. (original) The method of claim 71, wherein the step of identifying further 
comprises identifying through Dialed Number Identification Services. 

76. (original) The method of claim 73, wherein the authenticator is further 
adapted to verify the response of the user request enabling means to the security challenge based 
on the database in the authenticator, and to authorize access to the application server, and further 
comprising the step of authorizing access to an application server. 
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